Hi, I am trying to create certificates in Freeradius going inside /usr/local/etc/raddb/certs. I need these certificates for EAP-TTLS authentication for wireless access points. As suggested in deployingradius.com and README inside /usr/local/etc/raddb/certs; I tried to create "Test Certificates" for testing purpose at first. I tried the command "make" inside /usr/local/etc/raddb/certs, but it doesn't do anything, i.e. doesn't show any certificates building. Also I tried "./bootstrap" going inside the same certs directory; it also doesn't do anything. I don't see any certificates like "root CA" that has been built after I run "make" or "./bootstrap" command inside certs directory. I have already installed "openssl" in my machine with freebsd in which freeradius server is installed. Is there anything I am missing? Your suggestions would be greately appreciated. Thanks -- View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Hi, Normally your bootstrap script runs "make" command first, if make is not supported then it runs the script. Script creates 1. random , 01.pem ca.pem & server.pem & other files in different format. If your opessl command is not working properly or you have some .cnf file missing in the directory then the script will exit with status 1. you first try , "openssl dhparam -out dh 1024" & see if dh file is created or not ,to check that you have openssl installed correctly. Regards, Prateek When you run you boots On Wed, Mar 14, 2012 at 6:49 PM, suggestme <suggest_me@hotmail.com> wrote:
Hi,
I am trying to create certificates in Freeradius going inside /usr/local/etc/raddb/certs. I need these certificates for EAP-TTLS authentication for wireless access points. As suggested in deployingradius.com and README inside /usr/local/etc/raddb/certs; I tried to create "Test Certificates" for testing purpose at first. I tried the command "make" inside /usr/local/etc/raddb/certs, but it doesn't do anything, i.e. doesn't show any certificates building. Also I tried "./bootstrap" going inside the same certs directory; it also doesn't do anything. I don't see any certificates like "root CA" that has been built after I run "make" or "./bootstrap" command inside certs directory. I have already installed "openssl" in my machine with freebsd in which freeradius server is installed. Is there anything I am missing? Your suggestions would be greately appreciated.
Thanks
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I tried: openssl dhparam -out dh 1024 as you suggested and dh file is created as below: #openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ...................................................................+...+....+...................................................................................+...........+.......+.....................................+................+........+...........................................................................+..................................................+..............................+.............................................................+.........................................................................................................................................++*++*++* Inside Dh file I can see: -----BEGIN DH PARAMETERS----- MIGHAoGBAKUwai2pBXG3jEBbBRk08wDTE+l0m6USXQcq5AF1FMM/3RxFOZvfgotu qEqQJAYvUawmG2JScnPqPNeP2kHOCPyGrtCgAeXXKu0kbN8liniRLWpvUoy9LlJE XMr0RyuNUJFUvnBdGL8Hup5X7pqIezIKTpvrgGmnNze+tytw8ZkjAgEC -----END DH PARAMETERS----- *Does this mean my OpenSSL is ok?* I have used "make install" to install ports in freebsd and this command works and everything is working good till now. I have already configured Freeradius for the users in Active directory; everything is working perfect for other authentications method. Should I try "make install" command instead of "make" or "./bootstrap" going inside /usr/local/etc/raddb/certs directory? Thanks -- View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564... Sent from the FreeRadius - User mailing list archive at Nabble.com.
check if u r having server.cnf, ca.cnf & client.cnf in certs directory. If yes run bootstrap , to make client cert run make client. On Wed, Mar 14, 2012 at 8:09 PM, suggestme <suggest_me@hotmail.com> wrote:
I tried: openssl dhparam -out dh 1024 as you suggested and dh file is created as below:
#openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time
...................................................................+...+....+...................................................................................+...........+.......+.....................................+................+........+...........................................................................+..................................................+..............................+.............................................................+.........................................................................................................................................++*++*++*
Inside Dh file I can see:
-----BEGIN DH PARAMETERS----- MIGHAoGBAKUwai2pBXG3jEBbBRk08wDTE+l0m6USXQcq5AF1FMM/3RxFOZvfgotu qEqQJAYvUawmG2JScnPqPNeP2kHOCPyGrtCgAeXXKu0kbN8liniRLWpvUoy9LlJE XMr0RyuNUJFUvnBdGL8Hup5X7pqIezIKTpvrgGmnNze+tytw8ZkjAgEC -----END DH PARAMETERS-----
*Does this mean my OpenSSL is ok?*
I have used "make install" to install ports in freebsd and this command works and everything is working good till now. I have already configured Freeradius for the users in Active directory; everything is working perfect for other authentications method. Should I try "make install" command instead of "make" or "./bootstrap" going inside /usr/local/etc/raddb/certs directory?
Thanks
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Prateek Kumar -
suggestme